Webfwlog Firewall Log Analyzer

SourceForge.net Logo

Home Page
Subversion Repository

Web-Based Firewall Log Analysis and Reporting


Webfwlog is a flexible web-based firewall log analyzer and reporting tool. It supports standard system logs for linux, FreeBSD, OpenBSD, NetBSD, Solaris, Irix, OS X, etc. as well as Windows XP®. Supported log file formats are netfilter, ipfilter, ipfw, ipchains and Windows XP®. Webfwlog also supports logs saved in a database using the ULOG or NFLOG targets of the linux netfilter project, or any other database logs mapped with a view to the ulogd schema. Versions 1 and 2 of ulogd database schemas are supported.

Webfwlog fully supports IPv6 for database logs, and netfilter and ipfilter system logs.
Webfwlog includes lookup support for MaxMind's geoip data (version 2), with additional support for filtering and sorting for system logs and PostgreSQL database logs.

With Webfwlog you can design reports to use on your logged data in whatever configuration you desire. Included are example reports as a starting point. You can sort a report with a single click, "drill-down" on the reports all the way to the packet level, and save your reports for later use. You can also create a link directly to any saved report.

You can also try a demo.

NEWS 2016-08-05

Webfwlog-1.1.0 has been released and can be downloaded below. This release adds support for MaxMind's geoip location databases. See the Change Log and Release Notes for details.



- A web server with PHP >= 4.1
      - PHP >= 5.3 required for geoip
- Log files in standard netfilter, ipfilter, ipfw, ipchains or Windows XP® format
      or database logs populated with the ULOG or NFLOG target of netfilter,
      or other database logs mapped with a view to ulogd version 1 or 2 schemas
- A MySQL or PostgreSQL database server:
      - MySQL >= 3.23.52 or any production release of 4.x or 5.x
            - MySQL >= 5 required for IPv6
      - PostgreSQL >= 7.1
            - PostgreSQL >= 7.4 required for IPv6
            - PostgreSQL >= 9.1 required for geoip
- Your favorite web browser.

Windows XP® support provided via Cygwin.


You can download source tarballs and rpms for webfwlog releases and rpms from Sourceforge or from the development site.

Additional downloads are available via anonymous ftp at ftp.webfwlog.net.

A FreeBSD package is available in the ports collection as security/webfwlog


Webfwlog is currently available only in English. If you are interested in translating webfwlog into your preferred language please contact me.


Webfwlog is licensed under the GNU GPL.


If you need help you can email the author.


Please report bugs to Bugzilla.